ISO 22000 is the international standard for Food Safety Management Systems (FSMS), published by the International Organization for Standardization. It provides a framework for organizations across the entire food chain to identify, control, and reduce food safety hazards to a level that is safe for human consumption.
Unlike HACCP, which focuses specifically on hazard analysis and critical control points within a production process, ISO 22000 is a full management system standard. It incorporates HACCP principles, prerequisite programmes, and the plan-do-check-act cycle into a single, unified framework that can be externally audited and certified. This makes it a significantly stronger credential than a standalone HACCP plan, and one that is increasingly demanded by food retailers, exporters, and government bodies across Canada and internationally.
The current version, ISO 22000:2018, adopts the Annex SL high-level structure shared by ISO 9001:2015 and ISO 14001:2015. This means Canadian food businesses that already hold ISO 9001 certification can integrate ISO 22000 into their existing management system with considerably less additional effort, reducing duplication and streamlining audits.
ISO 22000 applies to any organization involved in the food chain, regardless of size or the stage at which it operates. This includes primary producers such as farms and fisheries, food processors and manufacturers, packaging material suppliers, retailers, distributors, logistics and cold chain providers, and catering and food service businesses. Even organizations that produce equipment used in food production can pursue ISO 22000 certification.
In Canada specifically, ISO 22000 certification is increasingly aligned with the requirements of the Safe Food for Canadians Regulations (SFCR) administered by the Canadian Food Inspection Agency (CFIA). While the SFCR mandates preventive control plans rather than ISO 22000 certification directly, businesses with a certified FSMS can demonstrate compliance far more efficiently and are generally better positioned during CFIA inspections.
This is the most common question Canadian food businesses ask. HACCP is a food safety methodology, not a management system standard. It provides a systematic approach to identifying and controlling biological, chemical, and physical hazards in a specific food production process. Our HACCP certification guide for Canadian food businesses covers the seven HACCP principles in detail.
ISO 22000 includes HACCP as a component, but goes further. It requires Prerequisite Programmes (PRPs) that control conditions across the entire facility, not just at specific critical control points. It also requires management commitment, documented food safety objectives, internal auditing, management review, and continual improvement, none of which are part of a basic HACCP plan. The result is a more robust, comprehensive, and externally verifiable food safety system.
For Canadian businesses that already have HACCP in place, the transition to ISO 22000 is generally straightforward. The hazard analysis work is retained and enhanced, and the main effort lies in building the management system elements around it. Many Canadian food processors in Alberta, Ontario, British Columbia, and Quebec find that the investment in ISO 22000 pays back quickly through improved retailer relationships and stronger positioning for export contracts.
The starting point is a thorough gap analysis comparing your existing food safety practices, documentation, and facility conditions against ISO 22000:2018 requirements. This produces a prioritized action plan covering what needs to be developed, enhanced, or formalized before your certification audit. For businesses in Alberta, Ontario, British Columbia, and other provinces, the gap analysis is typically conducted on-site by a qualified food safety consultant.
Prerequisite Programmes are the foundation of the ISO 22000 system. They control general hygiene and facility conditions across your entire operation, independent of the specific food being produced. PRPs typically cover pest management, personal hygiene, cleaning and sanitation, allergen management, supplier control, waste management, and facility maintenance. Developing documented, effective PRPs is often the most time-consuming phase for businesses that are new to food safety certification.
The hazard analysis under ISO 22000 follows the Codex Alimentarius HACCP principles but within a more structured framework. Each step of your production process is assessed for potential biological, chemical, and physical hazards. Critical Control Points are identified and validated, with monitoring procedures, corrective action plans, and verification activities documented for each. If you already have a HACCP plan, this phase focuses on enhancing it to meet ISO 22000 requirements.
The FSMS documentation brings all elements together: the food safety policy, food safety objectives, the food safety team structure, procedures for emergency preparedness, product withdrawal and recall, and records management. ISO 22000:2018 is less prescriptive about specific document formats than earlier standards, giving organizations flexibility to develop documentation that genuinely reflects how they operate rather than generic templates.
ISO 22000 requires a designated Food Safety Team Leader with relevant education and experience in food safety, and a Food Safety Team with the knowledge and skills to develop and maintain the FSMS. All relevant staff must be trained on the food safety policy, the PRPs that apply to their work area, and emergency procedures. Auditors will interview employees at multiple levels, so genuine understanding across the team is essential.
Before the certification audit, an internal audit verifies that the FSMS is functioning as designed and that all elements are implemented effectively. Verification activities, which are distinct from monitoring activities at CCPs, confirm that the overall system is achieving its food safety objectives. Any non-conformances identified during the internal audit must be addressed and closed out before proceeding to the external audit.
The external certification audit is conducted by an accredited certification body. Stage 1 reviews your FSMS documentation and confirms readiness for Stage 2. Stage 2 is the main on-site audit where the certification body verifies that your FSMS is genuinely implemented and effective across your facility. Upon successful completion, the ISO 22000 certificate is issued and is valid for three years, subject to annual surveillance audits.
CertCanada provides ISO 22000 consulting and certification support to food businesses across every Canadian province and territory. Our on-site approach means we work directly at your facility, whether you are a food processor in Calgary or Edmonton, a manufacturer in Toronto, Mississauga, or Hamilton, a seafood processor in Halifax or Sydney, a dairy operation in Quebec City or Montreal, or a grain and oilseed processor in Saskatoon, Regina, or Winnipeg.
In Alberta, food processing is a major industry sector, and ISO 22000 certification is increasingly expected by both domestic retailers and export customers in the US and Asia. In British Columbia, food manufacturers in Vancouver, Surrey, and Kelowna face similar pressure from international buyers. Ontario remains Canada's largest food processing province, with facilities in Toronto, Mississauga, Hamilton, and Ottawa regularly pursuing ISO 22000 to meet retailer and institutional buyer requirements.
In the Atlantic provinces, including Nova Scotia, New Brunswick, and Prince Edward Island, the seafood processing sector is a primary driver of ISO 22000 adoption. In Quebec, the agri-food sector is large and export-oriented, with Montreal and Quebec City businesses frequently requiring ISO 22000 to access European and American markets. Wherever your facility is located across Canada, CertCanada brings the same depth of expertise and on-site commitment to every engagement.
Many Canadian food businesses pursuing ISO 22000 are also required by their buyers to hold social compliance certifications. Major food retailers and restaurant chains frequently require suppliers to demonstrate ethical sourcing and labour practices alongside food safety credentials. Our guide to BSCI audits for Canadian businesses covers the Business Social Compliance Initiative requirements that are common among European food retailers sourcing from Canada.
For food businesses supplying to customers who require the highest level of social accountability verification, our guide to SA8000 social accountability certification in Canada explains the requirements and how to prepare. CertCanada supports Canadian food businesses through both food safety and social compliance certification programmes, reducing the complexity of managing multiple standards simultaneously.
ISO 22000 is not simply an upgraded HACCP plan. It is a complete food safety management system that gives retailers, export customers, and regulatory bodies a single, externally verified credential covering everything from hazard control to management commitment to continual improvement. Canadian food businesses that treat it as an operational discipline rather than a compliance exercise consistently find that certification opens doors that a standalone HACCP plan cannot. For businesses already holding ISO 9001, the integration path is particularly efficient and the combined system becomes a genuine competitive advantage in both domestic and international markets.
Book a free 30-minute consultation with Sarita Rana and get a clear roadmap for your food safety management system certification.